diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index 724ce1e..d2578cf 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -13,9 +13,9 @@ publish.workspace = true
 [dependencies]
 url = { version = "2.5.2" }
 rustc-hash = "2.0.0"
-thiserror = "1.0.63"
+thiserror = "1.0.64"
 tracing = "0.1.40"
-async-trait = "0.1.82"
+async-trait = "0.1.83"
 base64 = "0.22.1"
 aws-lc-rs = { version = "1.9.0", default-features = false, features = [
   "aws-lc-sys",
diff --git a/rpxy-bin/Cargo.toml b/rpxy-bin/Cargo.toml
index de52b55..06086ee 100644
--- a/rpxy-bin/Cargo.toml
+++ b/rpxy-bin/Cargo.toml
@@ -40,11 +40,11 @@ tokio = { version = "1.40.0", default-features = false, features = [
   "macros",
 ] }
 tokio-util = { version = "0.7.12", default-features = false }
-async-trait = "0.1.82"
+async-trait = "0.1.83"
 futures-util = { version = "0.3.30", default-features = false }
 
 # config
-clap = { version = "4.5.17", features = ["std", "cargo", "wrap_help"] }
+clap = { version = "4.5.18", features = ["std", "cargo", "wrap_help"] }
 toml = { version = "0.8.19", default-features = false, features = ["parse"] }
 hot_reload = "0.1.6"
 
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index c3f12c9..d56ad9d 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -18,14 +18,14 @@ http3 = []
 rustc-hash = { version = "2.0.0" }
 tracing = { version = "0.1.40" }
 derive_builder = { version = "0.20.1" }
-thiserror = { version = "1.0.63" }
+thiserror = { version = "1.0.64" }
 hot_reload = { version = "0.1.6" }
-async-trait = { version = "0.1.82" }
+async-trait = { version = "0.1.83" }
 rustls = { version = "0.23.13", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
-rustls-pemfile = { version = "2.1.3" }
+rustls-pemfile = { version = "2.2.0" }
 rustls-webpki = { version = "0.102.8", default-features = false, features = [
   "std",
   "aws_lc_rs",
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index 520c23c..7b397a8 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -45,17 +45,17 @@ tokio = { version = "1.40.0", default-features = false, features = [
 ] }
 tokio-util = { version = "0.7.12", default-features = false }
 pin-project-lite = "0.2.14"
-async-trait = "0.1.82"
+async-trait = "0.1.83"
 
 # Error handling
 anyhow = "1.0.89"
-thiserror = "1.0.63"
+thiserror = "1.0.64"
 
 # http for both server and client
 http = "1.1.0"
 http-body-util = "0.1.2"
 hyper = { version = "1.4.1", default-features = false }
-hyper-util = { version = "0.1.8", features = ["full"] }
+hyper-util = { version = "0.1.9", features = ["full"] }
 futures-util = { version = "0.3.30", default-features = false }
 futures-channel = { version = "0.3.30", default-features = false }
 
@@ -90,11 +90,11 @@ h3-quinn = { version = "0.0.7", optional = true }
 s2n-quic-h3 = { path = "../submodules/s2n-quic-h3/", features = [
   "tracing",
 ], optional = true }
-s2n-quic = { version = "1.46.0", default-features = false, features = [
+s2n-quic = { version = "1.47.0", default-features = false, features = [
   "provider-tls-rustls",
 ], optional = true }
-s2n-quic-core = { version = "0.46.0", default-features = false, optional = true }
-s2n-quic-rustls = { version = "0.46.0", optional = true }
+s2n-quic-core = { version = "0.47.0", default-features = false, optional = true }
+s2n-quic-rustls = { version = "0.47.0", optional = true }
 ##########
 # for UDP socket wit SO_REUSEADDR when h3 with quinn
 socket2 = { version = "0.5.7", features = ["all"], optional = true }
diff --git a/submodules/s2n-quic-h3/Cargo.toml b/submodules/s2n-quic-h3/Cargo.toml
index 5af7a2a..a2e1a83 100644
--- a/submodules/s2n-quic-h3/Cargo.toml
+++ b/submodules/s2n-quic-h3/Cargo.toml
@@ -15,8 +15,8 @@ futures = { version = "0.3", default-features = false }
 h3 = { version = "0.0.6", features = ["tracing"] }
 # s2n-quic = { path = "../s2n-quic" }
 # s2n-quic-core = { path = "../s2n-quic-core" }
-s2n-quic = { version = "1.46.0" }
-s2n-quic-core = { version = "0.46.0" }
+s2n-quic = { version = "1.47.0" }
+s2n-quic-core = { version = "0.47.0" }
 tracing = { version = "0.1.40", optional = true }
 
 [features]